$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa File: a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa (raw, json) Hash identifier: /TWfFQepzggNd36iFUTukkXlYrgywClDCRlyDicasgk= Subject key identifier: A4:51:CF:7C:0D:B2:17:C6:D1:E4:9F:7D:4D:97:6D:53:2F:C3:0B:82 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A6AF0A0F0565B20B55B242780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa Signing time: Sat 05 Jul 2025 13:01:04 +0000 ROA not before: Sat 05 Jul 2025 13:01:04 +0000 ROA not after: Fri 03 Oct 2025 13:01:04 +0000 asID: 396573 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:f0:a0:f0:56:5b:20:b5:5b:24:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 5 13:01:04 2025 GMT Not After : Oct 3 13:01:04 2025 GMT Subject: CN=f8b8d279-dc5f-4fd2-aadb-e4f69149dbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:d9:41:35:40:16:b6:e4:3f:11:dc:57:53: 38:0a:56:ab:cc:a3:d2:64:8e:67:65:52:ee:91:11: 91:0f:de:65:bb:7a:c4:5d:9e:08:26:9a:4c:93:0f: fb:89:e4:82:18:0d:46:35:5f:4f:59:20:14:cd:a9: ce:3d:53:f8:22:2c:c7:eb:56:b8:1c:67:f3:f7:a4: aa:b5:98:3d:76:f6:83:98:d1:49:5c:46:e4:25:1a: ee:cd:cc:42:a7:6c:4a:e5:fd:9c:8f:8e:9e:c6:cf: fc:5e:68:09:6e:e4:c2:ba:e7:49:d7:d1:ce:ef:d6: 57:a0:8a:cb:e5:8c:8c:b4:03:f2:47:d9:62:40:d8: e3:40:25:a2:45:8b:1a:e5:f9:e3:19:f1:b7:0f:bd: e0:60:e3:c2:50:ee:1a:85:51:51:1c:a5:20:d4:08: 54:62:71:c8:fc:c8:d4:49:e2:04:74:3d:42:ed:db: 21:d7:0d:a6:64:60:7f:c6:3b:95:b6:7f:a9:ed:80: b6:d8:3a:83:90:df:7d:46:10:62:48:25:cd:0c:ec: d2:54:c0:63:c3:fc:84:93:c7:4f:f4:8f:78:18:b0: c7:02:ad:f6:71:0d:0e:ad:85:8b:e8:50:6d:75:43: c7:e3:aa:e9:ec:e1:aa:79:be:18:67:c5:96:bd:c5: 06:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:51:CF:7C:0D:B2:17:C6:D1:E4:9F:7D:4D:97:6D:53:2F:C3:0B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a2:d5:d4:a5:3f:b8:d1:e7:5d:fc:03:21:c9:2f:c1:fc:1a: 42:6f:cb:85:33:db:ea:34:08:4b:3e:ca:81:85:f7:8b:e8:61: fa:45:37:d9:63:7b:d7:52:48:ef:3b:6b:f9:5c:64:db:9c:26: 24:23:39:6d:4a:d0:20:fd:a0:8e:65:45:22:2c:5f:18:65:e3: df:b2:a0:a3:e9:61:3e:04:36:84:b2:d4:3c:0a:97:bd:60:3c: c6:7d:2a:a4:8b:35:00:1e:e1:1a:60:73:03:96:54:18:63:21: 94:ca:87:a8:b9:41:82:f9:d6:60:ba:4a:0d:1c:41:bb:d8:40: b5:61:06:c8:60:b0:1c:1e:be:cd:b6:f5:97:cb:4d:db:77:35: 91:12:08:9c:d8:63:0c:f0:59:7d:06:91:17:44:7d:3a:9e:bb: 3f:e8:a2:4f:4c:84:9f:eb:39:4d:3f:e5:38:5b:32:62:02:e1: ee:a1:09:82:9d:2b:88:0d:1f:56:b6:95:a2:30:22:41:e4:45: cb:f7:b7:2e:77:1f:16:f9:1c:11:3c:66:db:40:8c:9f:10:ce: 49:a3:0e:e6:31:a1:b9:74:7f:48:23:75:f8:73:75:da:88:2d: 69:31:b4:aa:08:4b:4c:a2:9a:8c:cb:e2:db:de:ca:cb:67:61: 29:1d:51:54 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpq8KDwVlsgtVskJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjhiOGQyNzktZGM1Zi00ZmQyLWFhZGItZTRmNjkxNDlkYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml3ZQTVAFrbkPxHcV1M4ClarzKPSZI5nZVLu kRGRD95lu3rEXZ4IJppMkw/7ieSCGA1GNV9PWSAUzanOPVP4IizH61a4HGfz96Sq tZg9dvaDmNFJXEbkJRruzcxCp2xK5f2cj46exs/8XmgJbuTCuudJ19HO79ZXoIrL 5YyMtAPyR9liQNjjQCWiRYsa5fnjGfG3D73gYOPCUO4ahVFRHKUg1AhUYnHI/MjU SeIEdD1C7dsh1w2mZGB/xjuVtn+p7YC22DqDkN99RhBiSCXNDOzSVMBjw/yEk8dP 9I94GLDHAq32cQ0OrYWL6FBtdUPH46rp7OGqeb4YZ8WWvcUGxQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKRRz3wNshfG0eSffU2XbVMvwwuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTFhOTA1YzgtYThhOS0z NjgxLWJlNmYtNDRmYWFjMGU1YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAZotXUpT+40edd/AMhyS/B/BpCb8uFM9vqNAhL PsqBhfeL6GH6RTfZY3vXUkjvO2v5XGTbnCYkIzltStAg/aCOZUUiLF8YZePfsqCj 6WE+BDaEstQ8Cpe9YDzGfSqkizUAHuEaYHMDllQYYyGUyoeouUGC+dZgukoNHEG7 2EC1YQbIYLAcHr7NtvWXy03bdzWREgic2GMM8Fl9BpEXRH06nrs/6KJPTISf6zlN P+U4WzJiAuHuoQmCnSuIDR9WtpWiMCJB5EXL97cudx8W+RwRPGbbQIyfEM5Jow7m MaG5dH9II3X4c3XaiC1pMbSqCEtMopqMy+Lb3srLZ2EpHVFU -----END CERTIFICATE-----Generated at Wed Jul 23 17:12:38 2025 by rpki-client